CVE-2020-7729

HIGH

grunt < 1.3.0 - Arbitrary Code Execution via Insecure YAML Deserialization

Title source: llm
STIX 2.1

Description

The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.

References (6)

Core 6
Core References
Exploit, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JS-GRUNT-597546
Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-607922
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/09/msg00008.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4595-1/

Scores

CVSS v3 7.1
EPSS 0.0238
EPSS Percentile 81.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-1188
Status published
Products (4)
canonical/ubuntu_linux 18.04
debian/debian_linux 9.0
gruntjs/grunt < 1.3.0
npm/grunt 0 - 1.3.0npm
Published Sep 03, 2020
Tracked Since Feb 18, 2026